0 reputation · 2h ago
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Accepted answer · chosen by the author
0 reputation · 2h ago
Use authenticated encrypted connections and scoped roles. Restrict cluster administration and index access separately. Do not expose the cluster directly as an unrestricted search API; application-level query validation and limits remain necessary to protect data and cluster resources.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
elasticsearch